From a166234e6d3242021c34a56b6f7ac67dcad6d2ba Mon Sep 17 00:00:00 2001
From: Eric Lippmann <eric.lippmann@netways.de>
Date: Fri, 23 Jan 2015 10:40:48 +0100
Subject: [PATCH] monitoring/security: Hide 'Reschedule check' link if user
 lacks the respective permission

---
 .../show/components/checkstatistics.phtml     | 49 +++++++++++--------
 1 file changed, 29 insertions(+), 20 deletions(-)

diff --git a/modules/monitoring/application/views/scripts/show/components/checkstatistics.phtml b/modules/monitoring/application/views/scripts/show/components/checkstatistics.phtml
index e8c295298..5b54ae4ab 100644
--- a/modules/monitoring/application/views/scripts/show/components/checkstatistics.phtml
+++ b/modules/monitoring/application/views/scripts/show/components/checkstatistics.phtml
@@ -1,19 +1,13 @@
 <?php
 
-/** @var \Icinga\Module\Monitoring\Object\MonitoredObject $object */
+/** @type \Icinga\Module\Monitoring\Object\MonitoredObject $object */
 
 if ($object->getType() === $object::TYPE_HOST) {
-    $reschedule = $this->href(
-        'monitoring/host/reschedule-check',
-        array('host' => $object->getName())
-    );
+    $isService = false;
     $checkAttempts = $object->host_current_check_attempt . '/' . $object->host_max_check_attempts;
     $stateType = (int) $object->host_state_type;
 } else {
-    $reschedule = $this->href(
-        'monitoring/service/reschedule-check',
-        array('host' => $object->getHost()->getName(), 'service' => $object->getName())
-    );
+    $isService = true;
     $checkAttempts = $object->service_attempt;
     $stateType = (int) $object->service_state_type;
 }
@@ -32,29 +26,44 @@ if ($object->getType() === $object::TYPE_HOST) {
 <tr>
   <th><?= $this->translate('Next check') ?></th>
   <td>
+      <?php if ($this->hasPermission('monitoring/command/schedule-check')) {
+          if ($isService) {
+              $reschedule = $this->href(
+                  'monitoring/service/reschedule-check',
+                  array('host' => $object->getHost()->getName(), 'service' => $object->getName())
+              );
+          } else {
+              $reschedule = $this->href(
+                  'monitoring/host/reschedule-check',
+                  array('host' => $object->getName())
+              );
+          }
+      ?>
       <a href="<?= $reschedule ?>">
-          <?= $this->icon('reschedule') ?> <?= $this->translate('Reschedule') ?>
+          <?= $this->icon('reschedule') ?>
+          <?= $this->translate('Reschedule') ?>
       </a>
+      <?php } // endif ?>
       <?= $this->timeUntil($object->next_check) ?>
   </td>
 </tr>
 <tr>
     <th><?= $this->translate('Check attempts') ?></th>
     <?php if ($stateType === 0): ?>
-    <td><?= $checkAttempts ?> <?= $this->translate('(soft state)') ?></td>
+        <td><?= $checkAttempts ?> <?= $this->translate('(soft state)') ?></td>
     <?php else: ?>
-    <td><?= $checkAttempts ?> <?= $this->translate('(hard state)') ?></td>
+        <td><?= $checkAttempts ?> <?= $this->translate('(hard state)') ?></td>
     <?php endif; ?>
 </tr>
 <?php if ($object->check_execution_time): ?>
-<tr>
-  <th><?= $this->translate('Check execution time') ?></th>
-  <td><?= $object->check_execution_time ?>s</td>
-</tr>
+    <tr>
+        <th><?= $this->translate('Check execution time') ?></th>
+        <td><?= $object->check_execution_time ?>s</td>
+    </tr>
 <?php endif ?>
 <?php if ($object->check_latency): ?>
-<tr>
- <th><?= $this->translate('Check latency') ?></th>
- <td><?= $object->check_latency ?>s</td>
-</tr>
+    <tr>
+        <th><?= $this->translate('Check latency') ?></th>
+        <td><?= $object->check_latency ?>s</td>
+    </tr>
 <?php endif ?>